$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aef67419-5b25-3dac-916f-5eef2ac5fd52.roa File: aef67419-5b25-3dac-916f-5eef2ac5fd52.roa (raw, json) Hash identifier: dJRaA+ABXnVdN8miawjJQskm9FSKFNBw3e6LRPMtAzU= Subject key identifier: CA:6C:A1:6E:71:BF:B8:6B:A9:17:DF:25:BB:BA:0F:F4:C6:0E:A6:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285847E8F50D3C033F7B88906B52C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aef67419-5b25-3dac-916f-5eef2ac5fd52.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 396982 IP address blocks: 34.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:0d:3c:03:3f:7b:88:90:6b:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=cc6a1174-3b4f-452f-b774-375bcf8261fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:71:da:80:5d:9c:3b:21:a2:0e:c2:fb:07: 52:b3:b7:2d:a2:a9:0e:af:98:aa:a7:2f:a9:a3:55: dc:44:1c:14:a1:8d:e7:d0:fc:09:b2:b6:e3:ba:5b: 54:c6:57:b0:97:4b:c7:55:4c:5b:e7:1f:be:3c:8e: ad:ea:50:58:fb:f4:55:66:de:b6:e3:39:d9:11:dd: ef:cb:49:bc:b6:ef:03:8e:fe:2b:4c:64:00:83:ff: 99:ba:4e:13:ae:41:86:d1:a9:13:62:1f:4f:8a:7b: 57:8e:10:f4:9a:83:b8:08:e5:67:24:a5:5a:06:22: 68:c0:49:db:94:b8:bf:3a:6a:c7:a7:a9:a8:51:8e: 08:51:4c:28:e1:e5:06:90:22:6d:8d:54:06:07:8d: e3:e7:c1:b9:fd:58:0b:49:a0:0c:56:0f:f6:7e:0f: b6:3b:cd:3a:28:89:3f:5e:f1:11:4e:bd:9d:3d:46: 1f:20:dd:d9:94:2a:04:55:7e:cb:67:f1:84:52:bc: 6d:db:12:98:c3:ae:7d:f8:eb:6a:da:3a:79:2c:dc: 2c:1d:53:3b:55:04:31:0c:f4:74:c2:e8:d6:ce:71: 3a:55:e6:b0:76:2c:c3:bd:5c:8c:b1:76:53:3f:73: 65:3c:b7:0d:11:ee:b1:d4:bd:f9:97:57:4d:f0:c4: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6C:A1:6E:71:BF:B8:6B:A9:17:DF:25:BB:BA:0F:F4:C6:0E:A6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aef67419-5b25-3dac-916f-5eef2ac5fd52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:af:d2:2c:26:fa:9c:c1:fd:fa:72:01:07:4c:04:dd:10:82: 88:32:b8:3f:bb:88:62:71:ba:b9:c6:3a:bc:ee:70:07:c6:b9: 30:c9:2a:8d:8a:50:a1:45:89:de:09:d5:8b:0f:6f:b0:7b:82: d9:e4:07:36:6b:4e:e0:45:2a:65:05:62:81:4d:ab:1f:c1:ea: b4:15:ab:04:9d:5a:26:a3:11:99:ed:1b:68:78:2f:a8:d6:51: 46:e9:ec:ac:f7:92:ad:b5:8a:18:e1:d0:54:73:d5:7a:15:77: ce:63:4d:9f:4a:9e:d3:be:8f:10:97:75:6d:67:ad:bb:fe:d5: e4:92:96:9f:63:82:2c:72:66:4d:6f:fc:f5:d1:c1:c7:57:aa: 6a:97:8a:04:32:3f:05:28:40:f5:28:0d:21:a3:95:39:68:0d: 9c:06:c4:e6:3d:9d:51:09:f9:f2:5a:a5:96:ca:a6:40:ea:91: 14:9c:99:26:62:dd:99:88:ff:ca:4a:64:49:01:88:69:e3:a6: 68:1e:6f:be:4b:0a:9e:06:2e:1c:64:2d:8d:6e:f3:aa:a5:a1: 4b:91:18:b4:5e:a4:16:0f:a1:5d:7d:75:aa:70:84:59:4d:75: e1:2f:62:37:20:02:fc:29:0c:81:90:48:b3:59:d9:10:b2:7b: c1:a5:a8:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Q08Az97iJBrUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk Y2M2YTExNzQtM2I0Zi00NTJmLWI3NzQtMzc1YmNmODI2MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4dx2oBdnDshog7C+wdSs7ctoqkOr5iqpy+p o1XcRBwUoY3n0PwJsrbjultUxlewl0vHVUxb5x++PI6t6lBY+/RVZt624znZEd3v y0m8tu8Djv4rTGQAg/+Zuk4TrkGG0akTYh9PintXjhD0moO4COVnJKVaBiJowEnb lLi/OmrHp6moUY4IUUwo4eUGkCJtjVQGB43j58G5/VgLSaAMVg/2fg+2O806KIk/ XvERTr2dPUYfIN3ZlCoEVX7LZ/GEUrxt2xKYw659+Otq2jp5LNwsHVM7VQQxDPR0 wujWznE6VeawdizDvVyMsXZTP3NlPLcNEe6x1L35l1dN8MQOHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpsoW5xv7hrqRffJbu6D/TGDqZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVmNjc0MTktNWIyNS0z ZGFjLTkxNmYtNWVlZjJhYzVmZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIojgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmv0iwm+pzB/fpyAQdMBN0QgogyuD+7iGJxurnGOrzucAfGuTDJKo2K UKFFid4J1YsPb7B7gtnkBzZrTuBFKmUFYoFNqx/B6rQVqwSdWiajEZntG2h4L6jW UUbp7Kz3kq21ihjh0FRz1XoVd85jTZ9KntO+jxCXdW1nrbv+1eSSlp9jgixyZk1v /PXRwcdXqmqXigQyPwUoQPUoDSGjlTloDZwGxOY9nVEJ+fJapZbKpkDqkRScmSZi 3ZmI/8pKZEkBiGnjpmgeb75LCp4GLhxkLY1u86qloUuRGLRepBYPoV19dapwhFlN deEvYjcgAvwpDIGQSLNZ2RCye8GlqBo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:08:47 2024 by rpki-client on console-fra.rpki-client.org